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Claims 



WHAT IS CLAIMED IS: 



5 1. A method of sending an identity information document comprising: 

selecting identity information from a self-identity information store for inclusion in the 

identity information document; 
reading the selected identity information from a self-identity information store; 
generating the identity information document to include the selected identity information 
10 and at least a first key, the identity information document signed using a second 

key associated with the first key in the identity information document; and 
sending the identity information document to a recipient. 



2. The method of claim 1 , wherein selecting identity information comprises selecting a 

subset of identity information from the self-identity information store based on user input 
from a Graphical User Interface (GUI). 



5 3. The method of claim 1, wherein selecting identity information comprises selecting a 
predetermined subset of information from the self-identity information store. 



10 



4. 



The method of claim 1, wherein generating an identity information document comprises 
encoding the selected identification information in an extensible Mark-up Language 
(XML) document. 
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The method of claim 1, wherein the selected identity information comprises identity 
claims of a principal originating the identity information document. 

The method of claim 1, wherein the selected identity information comprises use policies 
for defining uses to which the contents of the identity information may be put. 

A method of receiving an identity information document comprising: 
receiving a signed identity information document from an originator; 
determining whether identity information in the identity information document is reliable; 
and 

saving the identity information in a recognized identity information store if the identity 
information is determined to be reliable. 

The method of claim 7, further comprising: 

responsive to determining that the identity information is not reliable, determining 
whether to verify the identity information; 

responsive to determining to verify the identity information, retrieving an Identification 
Recognition Number (IRN) from the originator of the identity information 
document, determining whether the IRN is correct and, responsive to the IRN 
being correct, saving the identity information in the recognized identity 
information store. 

The method of claim 8, wherein determining whether the identity information is reliable 
is based on a user input through a graphical user interface. 
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The method of claim 8, wherein determining whether to verify the identity information is 
based on a user input through a graphical user interface. 

A system to send an identity information document comprising: 
a processor; 

a communication channel connected with the processor; and 

a memory coupled with and readable by the processor, the memory containing a series of 
instructions that, when executed by the processor, cause the processor to select 
identity information from a self-identity information store for inclusion in the 
identity information document, read the selected identity information from a self- 
identity information store, generate the identity information document to include 
the selected identity information and at least a first key, the identity information 
document signed using a second key paired with the first key; and send the 
identity information document to a recipient connected to the communication 
channel 

The system of claim 11, wherein selecting identity information comprises selecting a 
subset of identity information from the self-identity information store based on user input 
from a Graphical User Interface (GUI). 

The system of claim 11, wherein selecting identity information comprises selecting a 
predetermined subset of information from the self-identity information store. 
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14. The system of claim 11, wherein generating an identity information document comprises 
encoding the selected identification information in an extensible Mark-up Language 
(XML) document. 

15. The system of claim 1 1 , wherein the selected identity information comprises identity 
claims of a principal originating the identity information document. 

16. The system of claim 1 1 , wherein the selected identity information comprises use policies 
for defining uses to which the contents of the identity information may be put. 

17. A system to receive an identity information document from an originator for use in future 
recognition of the originator comprising: 

a processor; 

a communication channel connected with the processor; and 

a memory coupled with and readable by the processor, the memory containing a series of 
instructions that, when executed by the processor, cause the processor to receive a 
signed identity information document from an originator, determine whether 
identity information in the identity information document is reliable, and save the 
identity information in a recognized identity information store if the identity 
information is determined to be reliable, the recognized identity information store 
being used for future recognition of the originator. 

1 8. The system of claim 1 7, further comprising: 

responsive to determining that the identity information is not reliable, determining 
whether to verify the identity information; 



MS# 306223.01 
M&G 40062.02 15US01 

-29- 

responsive to determining to verify the identity information, receiving an Identification 
Recognition Number (IRN) from the initiator of the identity information 
document, determining whether the IRN is correct and, responsive to the IRN 
being correct, saving the identity information in the recognized identity 
information store. 

The system of claim 18, wherein determining whether the identity information is reliable 
is based on a user input through a graphical user interface. 

The system of claim 18, wherein determining whether to verify the identity information is 
based on a user input through a graphical user interface. 

A computer readable medium encoding a computer program of instructions for executing 
a computer process for identity recognition, said computer process comprising: 
selecting identity information from a self-identity information store for inclusion in the 

identity information document; 
reading the selected identity information from a self-identity information store; 
generating the identity information document to include the selected identity information 
and at least a first key, the identity information document signed with a second key 
associated with the first key in the identity information document; and 
sending the identity information document to a recipient. 
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The computer readable medium of claim 21, wherein selecting identity information 
comprises selecting a subset of identity information from the self-identity information 
store based on user input from a Graphical User Interface (GUI). 

The computer readable medium of claim 21, wherein selecting identity information 
comprises selecting a predetermined subset of information from the self-identity 
information store. 

The computer readable medium of claim 21, wherein generating an identity information 
document comprises encoding the selected identification information in an extensible 
Mark-up Language (XML) document. 

The computer readable medium of claim 21, wherein the selected identity information 
comprises identity claims of a principal originating the identity information document. 

The computer readable medium of claim 21, wherein the selected identity information 
comprises use policies for defining uses to which the contents of the identity information 
may be put. 

The computer readable medium of claim 21, further comprising: 
receiving a signed identity information document from an originator; 
determining whether identity information in the identity information document is reliable; 
and 
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saving the identity information in a recognized identity information store if the identity 
information is determined to be reliable, the recognized identity information store 
for future recognition of the originator. 

The computer readable medium of claim 27, further comprising: 

responsive to determining that the identity information is not reliable, determining 

whether to verify the identity information; 
responsive to determining to verify the identity information, retrieving a retrieved 

Identification Recognition Number (IRN) from the initiating system of the identity 
information document, generating a computed IRN at the receiving system based 
in information in the identity information document, comparing the retrieved IRN 
with the computed IRN to determine whether the computed IRN is verified and, 
responsive to the computed IRN being verified, saving the identity information in 
the recognized identity information store. 

The computer readable medium of claim 28, wherein determining whether the identity 
information is reliable is based on a user input through a graphical user interface. 

The computer readable medium of claim 28, wherein determining whether to verify the 
identity information is based on a user input through a graphical user interface. 



